chore(deps): update npm packages

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@angular/animations (source)	22.1.2 → 22.1.3
@angular/build	22.1.4 → 22.1.5
@angular/cdk	22.1.2 → 22.1.3
@angular/common (source)	22.1.2 → 22.1.3
@angular/compiler (source)	22.1.2 → 22.1.3
@angular/compiler-cli (source)	22.1.2 → 22.1.3
@angular/core (source)	22.1.2 → 22.1.3
@angular/forms (source)	22.1.2 → 22.1.3
@angular/material	22.1.2 → 22.1.3
@angular/platform-browser (source)	22.1.2 → 22.1.3
@angular/platform-browser-dynamic (source)	22.1.2 → 22.1.3
@angular/router (source)	22.1.2 → 22.1.3
@sanity/types (source)	6.9.2 → 6.10.1
posthog-js (source)	1.417.1 → 1.418.6
sass	1.102.0 → 1.103.0
vite (source)	8.2.1 → 8.2.2
vitest (source)	4.1.10 → 4.1.11

---

Release Notes

angular/angular (@​angular/animations)

v22.1.3

Compare Source

animations

Commit	Type	Description
d9620e0f1b	fix	detect object trigger values with Object.hasOwn

common

Commit	Type	Description
b3c78a5081	fix	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Type	Description
94f0b9a371	fix	preserve &ngsp; between sibling control flow blocks

core

Commit	Type	Description
afe529cb2d	fix	accept readonly arrays for setClassMetadata decorators
2c72fe3797	fix	allow readonly arrays in RawScopeInfoFromDecorator
ef2ce9a098	fix	expose debuggableFn for non-computed signal graph nodes
7bcce260f5	fix	prevent orphaned requestIdleCallback handle from re-entrant scheduling
44137117b3	fix	replace all hasOwnProperty usages with Object.hasOwn
85f12a5a13	fix	stop running further effects once one destroys the view mid-flush
c04931c88b	fix	throw a descriptive error instead of crashing when a hydration node is missing
601d1f6576	fix	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Type	Description
83450d2924	fix	report forbidden 2way bindings on when FormField is applied
5cb4ea7e35	fix	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Type	Description
0cd635e9e2	fix	cancel oversized fetch response bodies

language-server

Commit	Type	Description
14fbe04612	fix	recover project for external templates in solution-style workspaces

platform-browser

Commit	Type	Description
3ddcb1a101	fix	disallow event handler attributes in Meta
640460d606	fix	throw a descriptive error when insertBefore reference node is missing

router

Commit	Type	Description
abe019d505	fix	pass correct component to canDeactivate for named outlets in componentless parent routes

angular/angular-cli (@​angular/build)

v22.1.5

Compare Source

@​angular/cli

Commit	Type	Description
e672271f8	fix	enforce MCP roots in get_best_practices tool
a14916cc4	fix	handle errors from isAllowedWorkspacePath in best-practices tool
d6e1cddff	fix	throw on out-of-roots workspace in best-practices tool

@​schematics/angular

Commit	Type	Description
ba2b0e4c2	fix	transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/build

Commit	Type	Description
cba72902d	fix	correct misleading error message for top-level await
b4679998c	fix	disable code splitting for unit test builds
ff1d3565e	fix	preserve integrity and crossorigin in autoCsp loader
1fc1fb05c	perf	traverse AST with iterative post-order walker in i18n inliner

angular/components (@​angular/cdk)

v22.1.3

Compare Source

multiple

Commit	Type	Description
72a496882	fix	account for shadow dom in aria directives (#​33691)

sanity-io/sanity (@​sanity/types)

v6.10.1

Compare Source

Sanity Studio v6.10.1

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni4xMC4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author	Message	Commit
@​stipsan	fix(build): bake correct package version into cdn module bundles (#​14155)	3e5a82e
@​stipsan	chore(deps): revert client v8 upgrade for hotfix release (#​14153)	fdb7c52
@​stipsan	fix(core): classify client v8 timeout errors in the request-error channel (#​14146)	dc5e4c0
squiggler-app[bot]	chore(deps): dedupe pnpm-lock.yaml (#​14130)	8b8eaf9
@​pedrobonamin	fix(core): duplicate variant documents into the same variant (#​14041)	a29e7a7
@​rexxars	chore(deps): upgrade @sanity/client to v8 (#​14092)	37bdbaa

v6.10.0

Compare Source

Sanity Studio v6.10.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni45LjI

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author	Message	Commit
@​stipsan	chore(deps): remove unused @​tanstack/react-table dependency (#​14121)	6f143b4
squiggler-app[bot]	chore(deps): dedupe pnpm-lock.yaml (#​14122)	08e96ff
@​christianhg	chore: ignore and remove committed browser-test failure screenshots (#​14038)	62e62db
squiggler-app[bot]	fix(deps): update portabletext (#​14080)	9079e9a
squiggler-app[bot]	chore(deps): dedupe pnpm-lock.yaml (#​14064)	2c1d713
@​christianhg	fix(core): open the added annotation via markDefPaths instead of the deprecated markDefPath (#​14048)	44d3ee2
squiggler-app[bot]	fix(deps): update dependency @​portabletext/react to v8 (#​14082)	14c460a
@​bjoerge	chore(bench): avoid self-test failing on inconclusive + syntheticLarge (#​14085)	dcb12a5
squiggler-app[bot]	chore(deps): update dependency @​sanity/workbench to v0.1.0-alpha.42 (#​14120)	ae5001d
@​bjoerge	fix(core): increase spacing between troubleshooting tips (#​14099)	a2d57e6
squiggler-app[bot]	chore(deps): update dependency @​testing-library/user-event to ^14.6.4 (#​14111)	ac3d154
squiggler-app[bot]	chore(tests): generate dts tests 🤖 ✨ (#​14118)	f6d25a2
squiggler-app[bot]	fix(deps): update portabletext to v6 (#​14084)	1012cce
squiggler-app[bot]	chore(deps): update dependency web-vitals to ^6.1.1 (#​14112)	e8fdbfa
squiggler-app[bot]	chore(deps): update dependency @​sanity/workbench to v0.1.0-alpha.41 (#​14097)	2330f13
@​pedrobonamin	feat(vision): pass navbar variant with pinned release queries (#​14063)	ee6ebee
squiggler-app[bot]	fix(deps): update dependency @​sanity/cli to ^8.0.2 (#​14113)	9a3f73a
@​jordanl17	feat(test-studio): add sso login option for sandbox org (#​14089)	dbd7e76
squiggler-app[bot]	chore(deps): update renovatebot/github-action action to v46.2.2 (#​14076)	6f1e8c0
squiggler-app[bot]	chore(deps): update dependency @​sanity/functions to v1.6.8 (#​14067)	72338f9
@​stipsan	chore(sanity): add opt-in markdown bundle analyzer (#​14106)	31ae4a5
@​stipsan	test(storybook): co-locate visual regression stories (#​14104)	3729ae4
@​stipsan	chore(deps): bump styled-components to 6.5.3 (#​14103)	7d2ea95
squiggler-app[bot]	chore(deps): update dependency @​sanity/vanilla-extract-vite-plugin to ^0.2.13 (#​14096)	4ea5888
@​christianhg	fix(core): declare the Style and ListItem prop shapes locally (#​14049)	e032325
squiggler-app[bot]	chore(deps): update dependency chromatic to ^18.2.0 (#​14081)	2a12d2f
squiggler-app[bot]	fix(deps): update dependency @​sanity/preview-url-secret to ^4.1.4 (#​14077)	cf51cf9
squiggler-app[bot]	chore(deps): update dependency swr to ^2.5.1 (#​14075)	a4e6056
squiggler-app[bot]	chore(deps): update dependency sanity-plugin-internationalized-array to ^5.1.27 (#​14073)	093ac7f
squiggler-app[bot]	chore(deps): update dependency esbuild to v0.28.2 (#​14071)	8403750
squiggler-app[bot]	chore(deps): update dependency eventsource-parser to ^3.1.1 (#​14072)	c9b486e
squiggler-app[bot]	chore(deps): update dependency @​sanity/visual-editing-csm to ^3.0.15 (#​14070)	aa52529
squiggler-app[bot]	chore(deps): update dependency @​sanity/sdk-react to ^2.19.0 (#​14069)	4b18a10
squiggler-app[bot]	chore(deps): update dependency @​sanity/blueprints to ^0.23.6 (#​14066)	2da388a
squiggler-app[bot]	chore(tests): generate dts tests 🤖 ✨ (#​14094)	d6fb375
@​bjoerge	fix(core): link status.sanity.io in network troubleshooting tips (#​14095)	8ee1ed0
@​pedrobonamin	refactor(releases): route version discard through document operations (#​14058)	94ce4b8
@​pedrobonamin	refactor(structure): remove obsolete selectedVariantDisplay chip (#​13932)	9f542af
squiggler-app[bot]	fix(deps): update dependency @​sanity/cli to v8 (#​14083)	68297d0
@​shapirodaniel	fix(studio): replace robot token sign out with claim action (#​14044)	bbe74b5
squiggler-app[bot]	fix(deps): update dev-non-major (#​14078)	bb95b55
@​laurenashpole	chore: migrate box in components directories in core/studio (#​14019)	8341627
@​laurenashpole	chore: migrate box in misc directories in core/studio (#​14018)	b03ff17
squiggler-app[bot]	chore(deps): update dependency @​sanity/google-maps-input to ^6.1.11 (#​14068)	3999125
squiggler-app[bot]	chore(deps): update dependency @​sanity/ui to ^4.0.3 (#​14065)	999f834
squiggler-app[bot]	chore(deps): update dependency @​sanity/tsdown-config to ^0.24.1 (#​14047)	d53048e
@​pedrobonamin	fix(variants): report ALREADY_UNPUBLISHED for release-scoped variants (#​14012)	0b6b972
@​bjoerge	ci(bench): build packages in the self-test job (#​14061)	fe71d2e
squiggler-app[bot]	chore(deps): dedupe pnpm-lock.yaml (#​14046)	d1a4c99
@​EoinFalconer	chore: untrack the lefthook-generated husky hook (#​14060)	1524806
@​pedrobonamin	test(e2e): make navbar search spec resilient to search index lag (#​14043)	8c88091
@​shapirodaniel	fix(core): redirect to login after project claim (#​14042)	4666d4e
@​bjoerge	fix(bench): borrow head harness install for worktree builds (#​14040)	c1eaa37
@​pedrobonamin	refactor(releases): route version unpublish through document operations (#​14001)	708f04d
@​pedrobonamin	fix(structure): show published badge for live edit documents (#​14029)	f859eb2
@​jordanl17	fix(vision): stop swallowing paste events outside vision (#​14016)	75de447
@​stipsan	fix(presentation): replace path-to-regexp with urlpattern for main document routes (#​14028)	7147d04
@​pedrobonamin	fix(structure): keep manage versions when document has no actions (#​14031)	66e492c
squiggler-app[bot]	fix(deps): update dependency motion to ^13.1.0 (#​13981)	67ac5e9
@​jordanl17	ci(release): reconcile in-flight release checks on a schedule (#​13927)	481d12f
@​laurenashpole	chore: migrate box in core tasks (#​14015)	e63212d
@​laurenashpole	chore: migrate box in core field (#​13996)	4a671a6
@​christianhg	refactor(core): render the comment input through editor node registrations (#​14034)	da6f0f0
@​bjoerge	fix: prevent layout shift when switching field groups in dialog (#​14039)	4eeeb55
@​bjoerge	fix(core): record a resolvable schema type name at copy time (#​14035)	ec4383a
squiggler-app[bot]	chore(tests): generate dts tests 🤖 ✨ (#​14032)	781ade4
@​pedrobonamin	fix(variants): allow colons and reject commas in condition values (#​14021)	b9e2e17
@​bjoerge	chore(ci): publish next releases on a twice-daily schedule instead of per-commit (#​14000)	41ebb67
@​bjoerge	ci(release): comment on the release pr when a next release is published (#​14007)	548b7de
@​shapirodaniel	fix(core): hide lapsed unclaimed project nudge (#​13993)	908f00d
@​pedrobonamin	fix(e2e): pin workspace icon for chromatic snapshot stability (#​14022)	49133aa
@​bjoerge	chore(release-notes): bump all publishable packages (#​14013)	70d135a
@​laurenashpole	chore: migrate box in core/perspective to core/variants (#​13997)	c363f28
@​laurenashpole	chore: migrate box in core/releases (#​13992)	71303ab
@​bjoerge	fix: forward the workspace apiHost to the embedded sdk instance (#​13998)	2bc730c
@​stipsan	feat(storybook): add visual regression testing with chromatic (#​14002)	ac542a4
@​stipsan	feat(e2e): add chromatic visual regression snapshots to the e2e suite ([#​14003](https://redirect.github.com/sanity-io/sanity/i

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​angular/​platform-browser-dynamic@​22.1.3
	npm/​@​sanity/​types@​6.10.1
	npm/​@​angular/​platform-browser@​22.1.3
	npm/​@​angular/​animations@​22.1.3
	npm/​@​angular/​compiler-cli@​22.1.3
	npm/​@​angular/​router@​22.1.3
	npm/​@​angular/​forms@​22.1.3
	npm/​@​angular/​build@​22.1.5
	npm/​@​angular/​compiler@​22.1.3
	npm/​@​angular/​cdk@​22.1.3
	npm/​@​angular/​core@​22.1.3
	npm/​@​angular/​common@​22.1.3
	npm/​@​angular/​material@​22.1.3
	npm/​posthog-js@​1.418.6
	npm/​vite@​8.2.2
	npm/​sass@​1.103.0

View full report